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"Bucket Hashing and its Application to Fast Message Authentication", Phillip Rogaway, Acvances in Cryptology - 
CRYPTO '95, (found at http://seclab.cs, ucdavis.edu/papers- html). 



"Provably Secure Session Key Distribution-The Three Party Case", Bellare et al., Proc, of the 27th Annual ACM 
Symposium on Theory of Computing, Las Vegas, NV, (found at http://seclab.cs.ucdavis.edu/papers.html). 



"XOR MACs: New Methods for Message Authentication Using Finite Pseudorandom Functions", Bellare et 
al., Advances in Cryptology - CRYPTO '95, (found at http://seclab.cs.ucdavis.edu/papers.html). 



"Holding Intruders Accountable on the Internet", Staniford-Chen et al., Proc. of the 1995 IEEE Symposium on 
Security and Privacy, Oakland, CA, (11 pages) (found at http://seclab.cs.ucdavis.edu/papers.html). 



"LAFS: A Logging and Auditing File System", Christopher Wee, Proc, of the 11th Computer Security Applications 
Conference, 10 pages, (found at http://seclab.cs.ucdavis.edu/papers.html). 



'Towards a Property-based Testing Environment with Applications to Security-Critical Software", Fink et al., Proc. 
of the 4th in/ine Software Symposium, 10 pages, (found at http://seclab.cs.ucdavis.edu/papers.html). 



"Property-based Testing of Privileged Programs", Fink et al., Proc. of the 10th Annual Computer Security 
Applications Conference, Orlando, FL. 10 pages, (found at http://seclab.cs.ucdavis.edu/papers.html). 



"Arificial Intelligence and Intrusion Detection: Current and Future Directions", Jeremy Frank, Proc. of the 17th 
National Computer Security Conference. 12 pages, (found at http://seclab.cs.ucdavis.edu/papers.html). 



M 



"Automated Detection of Vulnerabilities in Privileged Programs by Execution Monitoring", Ko et al., Proc. of the 
10th Annual Computer Security Applications Conference, Orlando, FL. (found at 
http://seclab.cs.ucdavis.edu/papers.html). 



"Common Techniques in Fault-Tolerance and Security", Levitt et al., Proc. of the Dependable Computing for 
Critical Applications 4, San Diego, CA. 4 pages, (found at http://seclab.cs.ucdavis.edu/papers.html). 



"Network Intrustion Detection", Mukherjee et al„ IEEE Networi<, May-June 1994, Vol. 8, No. 3, pp. 26-41. (found 
at http://seclab.cs.ucdavis.edu/papers.html). 



"A New Suggestion for How to Encrypt with RSA", Bellare et al., 
http://seclab.cs.ucdavis.edu/papers.html). 



Eurocrypt '94, 20 pages, (found at 



'The Security of Cipher Block Chaining", Bellare et al.. Advances in Cryptology - CRYPTO '94, Santa Barbara CA. 
(19 pages.) (found at http://seclab.cs.ucdavis.edu/papers.html). 



"Analysis Of An Algorithm For Distributed Recognition And Accountability", Ko et al., Proc. 1st ACM Conference or 
Computer and Communication Security. Fairfax. VA, Nov. 1993, 11 pages, (found at 
http://seclab.cs.ucdavis.edu/papers.html). 
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"Entity Authentication and Key Distribution". Bellare et al., Advsnces in CryptoloQy - CRYPTO '93, Santa Barbara, 
CA, Aug 1993, pp. 232-249. (found at http://seclab.cs.ucdavis.edu/papers.html). 






F 


"Random Oracles are Practical: A Paradigm for Designing Efficient Protocols", Bellare et a!., Proc. of the 1st 
ACM Conference on Computer and Communication Security, Fairfax, VA, Nov. 1993, pp. 1545-164. (found at 
http://seclab.cs.ucdavis.edu/papers.html). 


1993 




G 


"A Software-Optimized Encryption Algorithm", Rogaway et a!., Proc. of the Fast Software Encryption Cambridge 
Security Workshop, Cambridge, UK (16 pages.) (found at http://seclab.cs.ucdavis.edu/papers.html). 


1993 




H 


"Anatomy of a Proactive Password Changer", Matt Bishop, Proc. of the UNI)( Security Symposium Hi Baltimore, 
MD, 15 pages, (found at http://seclab.cs.ucdavis.edu/papers.html). 


1992 




1 


"DIDS (Distributed Intrusion Detection System)- Motivation, Architecture, and An Early Prototype, Snapp et al., 
Proc. 14th National Computer Security Conference, Washington, DC (9 pages.) (found at 
http://seclab.cs.ucdavis.edu/papers.html). 


1991 




J 


"Proactive Password Checking", Matt Bishop, Proc. of the 7th Intemationa! Conference on Infomiation Security, 
May 1991, pp. 169-181. (found at http://seclab.cs.ucdavis.edu/papers.html). 


1991 




K 


Dissertation entitled "Issues in Debugging Sequential and Concurrent Programs: Methods, Techniques, and 
Implementation, University of California, Wingshun Wilson Ho, 191 pages, (found at 
http://seclab.cs.ucdavjs.edu/papers.html). 


1992 




L 


Abstract entitled "Collaboration Using Roles" by M. Bishop, Software-Practice and Experience, Vol. 20, No. 5, 
May 1990. (found at http://seclab.cs-ucdavis.edu/papers.html). 


5/90 




L 


Abstract entitled "An Extendable Password Checker'* by M. Bishop, Proc. UNIX Security II Portland, OR, 27-28 
Aug. 1990, pp. 15-16, (found at http://seclab.cs.ucdavis.edu/papers.html). 


1990 




M 


Abstract entitled "A Security Analysis of the NTP Protocol Version 2" by M. Bishop. 


12/90 


1 


N 


Abstract entitled "A Little Knowledge Goes a Long Way: Faster Detection of Compromised Data in 2-D Tables" 
by D. Gusfield, Proc. of the 1990 IEEE Symposium on Research in Security and Privacy, Oakland, CA, 7-9 May 
1990, pp. 86-94, (found at http://seclab.cs.ucdavis.edu/papers.html). 


5/90 


y 


O 


Abstract entitled "A Network Security Monitor" by L.T. Heberlein, G.V. Dias. K.N. Levitt, B. Mukherjee, and others 
Proc. of the 1990 lEE Symposium on Research in Security and Privacy, Oakland, CA, 7-9 May 1990, pp. 296- 
304, (found at http://seclab.cs.ucdavis.edu/papers.html). 
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y E 


Abstract entitled "Static Analysis Virus Detection Tools for UNIX Systems" by P. Kerchen, et al., Pnoc. 131^) 
National Computer Security Conference, Washington, DC, 1-4 Oct. 1990, pp. 350-365, (found at 
http://seclab.cs.ucdavis.edu/papers.html). 


10/90 






; F 


Abstract entitled "Security with Low Communication Overhead" by D. Beaver, et al., Proc. Advances in 
Cryptology-CRYPTO '90, Santa Barbara, CA, 1 1-15 August, 1990, pp. 62-76, (found at 
http://seclab.cs.ucdavis.edu/papers.html). 


8/90 






G 


Abstract entitled 'The Round Complexity of Secure Protocols" by D. Beaver, et al., Proc. of the 22nd Annual ACN^ 
Symposium on Theory of Computing, Baltimore, MD, 14-16 May 1990, pp. 503-513. (found at 
http://seclab.cs.ucdavis.edu/papers.html). 


5/90 






H 


Abstract entitled "PACLs: An Access Control List Approach to Anti-Viral Security" by D.R. Wichers, et al., Proc. 
13th National Computer Security Conference, Washington, DC, 1-4 Oct. 1990, pp. 340-349. (found at 
http://seclab.cs.ucdavis.edu/papers.html). 


10/90 






1 


Abstract entitled 'Verification of Secure Distributed Systems in Higher Order Logic: A Modular Approach Using 
Generic Components" by J. Alves-Foss, K. Levitt, Proc. of the 1991 IEEE Computer Society Symposium on 
Research in Security and Privacy, Oakland CA 20-22 May 1991, pp. 122-35. (found at 
http://sedab.cs.ucdavis.edu/paper5.html). 


5/91 






J 


Abstract entitled "An Authentication Mechanism for USENET' by M. Bishop, Proc. of the Winter 1991 USENIX 
Conference. 21-25 Jan. 1991, pp. 281-287, (found at http://seclab.cs.ucdavis.edu/papers.html). 


1/91 






K 


Abstract entitled "Password Management" by M. Bishop, COMPCON Spring '91. Digest of Papers. San 
Francisco, CA, 25 Feb.-1 March 1991, pp. 167-169. (found at http://seclab.cs.ucdavis.edu/papers.html). 


3/91 






L 


Abstract entitled 'Teaching Computer Security" by M, Bishop. 


5/93 






M 


Abstract entitled "Recent Changes to Privacy Enhanced Electronic Mail" by M. Bishop, Journal of 
lntemetwori<ing: Research and Experience. Vol. 4, No. 1, March 1993, pp. 47-59. (found at 
http://seclab.cs.ucdavis.edu/papers.html). 


3/93 






N 


Abstract entitled "A Modified Random Perturbation Method for Database Security" by P. Tendick, N. Matloff. 
ACM Transactions on Database Systems, March 1994, Vol. 19, No. 1, pp. 47-63, (found at 
http://seclab.cs.ucdavis.edu/papers.html). 


3/94 






O 


Short presentation entitled "Intrusion Detection for network Infrastructures" by S. Cheung, K.N. Levitt, C. Ko. 777e 
1995 IEEE Symposium on Security and Privacy, Oakland CA. 


5/95 






P 


Master Thesis entitled "Paradigms for the Reduction of Audit Trails" by B. Wetmore, pp. i-6. Unable to obtain 
entire thesis - portion downloaded from http://seclab.cs.ucdavis.edu/papers.htmi. 


1993 




Q 


"Open System Security - an Architectural Framewortc" by Arto T. Karila, (found at 
http://www/cs . pu rdue . ed u/coast/a rch ive/data/categ . 30 . html). 
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Product description for "Oil Change" located on the Internet at 
http://store.nncafee.conrt/product.asp?ProductlD=28&CategorylD-12, pp. 1-2 



NetRanger 1.3 User's Guide, Copyright© 1997 by WheelGroup Corporation. NetRanger product first available 
summer of 1996. 



1996 



"Information Security and Privacy in Network Environments," by U.S. Office of Technology Assessment, OTA- 
TCT-606 (Washington DC: US Government Printing Office). 



9/94 



"A Few Attacks on the Zero Knowledge State in Novell's Netware" by Greg Miller, pp. 1-11. (found 
at http://www.cs.purdue.edu/coast/archive/data/categ30.html). 
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